# Vulnerabilities published in 2017 - [CVE-2017-14273](https://insights.sbomify.com/CVE-2017-14273/): Memory corruption in xnview:xnview (high 7.8) - [CVE-2017-14272](https://insights.sbomify.com/CVE-2017-14272/): Memory corruption in xnview:xnview (high 7.8) - [CVE-2017-14271](https://insights.sbomify.com/CVE-2017-14271/): Memory corruption in xnview:xnview (high 7.8) - [CVE-2017-14270](https://insights.sbomify.com/CVE-2017-14270/): Memory corruption in xnview:xnview (high 7.8) - [CVE-2017-1427](https://insights.sbomify.com/CVE-2017-1427/): Cross-site scripting in Cognos Analytics (medium 6.1) - [CVE-2017-14269](https://insights.sbomify.com/CVE-2017-14269/): Information disclosure in ee:4gee wifi mbb firmware (critical 9.8) - [CVE-2017-14268](https://insights.sbomify.com/CVE-2017-14268/): Cross-site scripting in ee:4gee wifi mbb firmware (medium 6.1) - [CVE-2017-14267](https://insights.sbomify.com/CVE-2017-14267/): Cross-site request forgery in ee:4gee wifi mbb firmware (high 8.8) - [CVE-2017-14266](https://insights.sbomify.com/CVE-2017-14266/): Memory corruption in broadcom:tcpreplay (high 7.8) - [CVE-2017-14265](https://insights.sbomify.com/CVE-2017-14265/): Memory corruption in libraw:libraw (critical 9.8) - [CVE-2017-14263](https://insights.sbomify.com/CVE-2017-14263/): Privilege escalation in honeywell:enterprise dvr firmware (high 8.1) - [CVE-2017-14262](https://insights.sbomify.com/CVE-2017-14262/): Weak cryptography in samsung:srn 1000 firmware (high 8.1) - [CVE-2017-14261](https://insights.sbomify.com/CVE-2017-14261/): Memory corruption in bento4:bento4 (high 7.8) - [CVE-2017-14260](https://insights.sbomify.com/CVE-2017-14260/): Memory corruption in axiosys:bento4 (high 7.8) - [CVE-2017-14259](https://insights.sbomify.com/CVE-2017-14259/): Memory corruption in bento4:bento4 (high 7.8) - [CVE-2017-14258](https://insights.sbomify.com/CVE-2017-14258/): Memory corruption in bento4:bento4 (high 7.8) - [CVE-2017-14257](https://insights.sbomify.com/CVE-2017-14257/): Memory corruption in bento4:bento4 (high 7.8) - [CVE-2017-14252](https://insights.sbomify.com/CVE-2017-14252/): SQL injection in eyesofnetwork:eyesofnetwork (critical 9.8) - [CVE-2017-14251](https://insights.sbomify.com/CVE-2017-14251/): TYPO3 Arbitrary Code Execution (high 8.8) - [CVE-2017-1425](https://insights.sbomify.com/CVE-2017-1425/): Cross-site scripting in Business Process Manager Advanced (medium 5.4) - [CVE-2017-14249](https://insights.sbomify.com/CVE-2017-14249/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-14248](https://insights.sbomify.com/CVE-2017-14248/): Memory corruption in imagemagick:imagemagick (medium 6.5) - [CVE-2017-14247](https://insights.sbomify.com/CVE-2017-14247/): SQL injection in eyesofnetwork:eyesofnetwork (critical 9.8) - [CVE-2017-14246](https://insights.sbomify.com/CVE-2017-14246/): Memory corruption in debian:debian linux (high 8.1) - [CVE-2017-14245](https://insights.sbomify.com/CVE-2017-14245/): Memory corruption in debian:debian linux (high 8.1) - [CVE-2017-14244](https://insights.sbomify.com/CVE-2017-14244/): Auth bypass in iball:ib-wra150n firmware (critical 9.8) - [CVE-2017-14243](https://insights.sbomify.com/CVE-2017-14243/): Auth bypass in utstar:wa3002g4 firmware (critical 9.8) - [CVE-2017-14242](https://insights.sbomify.com/CVE-2017-14242/): Dolibarr SQL injection vulnerability in don/list.php (critical 9.8) - [CVE-2017-14241](https://insights.sbomify.com/CVE-2017-14241/): Dolibarr ERP and CRM contain XSS Vulnerability (medium 5.4) - [CVE-2017-14240](https://insights.sbomify.com/CVE-2017-14240/): Dolibarr ERP and CRM Sensitive Data Disclosure (high 7.5) - [CVE-2017-1424](https://insights.sbomify.com/CVE-2017-1424/): Cross-site scripting in Business Process Manager Advanced (medium 5.4) - [CVE-2017-14239](https://insights.sbomify.com/CVE-2017-14239/): Dolibarr cross-site scripting (XSS) vulnerability (medium 5.4) - [CVE-2017-14238](https://insights.sbomify.com/CVE-2017-14238/): Dolibarr SQL injection vulnerability in admin/menus/edit.php (critical 9.8) - [CVE-2017-14232](https://insights.sbomify.com/CVE-2017-14232/): Memory corruption in flif:flif (medium 5.5) - [CVE-2017-14231](https://insights.sbomify.com/CVE-2017-14231/): GeniXCMS denial of service (account blockage) (medium 5.3) - [CVE-2017-14230](https://insights.sbomify.com/CVE-2017-14230/): Memory corruption in cyrus:imap (critical 9.1) - [CVE-2017-1423](https://insights.sbomify.com/CVE-2017-1423/): Information disclosure in WebSphere Portal (medium 5.3) - [CVE-2017-14229](https://insights.sbomify.com/CVE-2017-14229/): Denial of service in jasper project:jasper (high 7.5) - [CVE-2017-14228](https://insights.sbomify.com/CVE-2017-14228/): Null dereference in canonical:ubuntu linux (medium 5.5) - [CVE-2017-14227](https://insights.sbomify.com/CVE-2017-14227/): Memory corruption in mongodb:mongodb (high 7.5) - [CVE-2017-14226](https://insights.sbomify.com/CVE-2017-14226/): Memory corruption in libreoffice:libreoffice (high 7.5) - [CVE-2017-14225](https://insights.sbomify.com/CVE-2017-14225/): Null dereference in ffmpeg:ffmpeg (high 8.8) - [CVE-2017-14224](https://insights.sbomify.com/CVE-2017-14224/): Memory corruption in imagemagick:imagemagick (high 8.8) - [CVE-2017-14223](https://insights.sbomify.com/CVE-2017-14223/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2017-14222](https://insights.sbomify.com/CVE-2017-14222/): Denial of service in ffmpeg:ffmpeg (medium 6.5) - [CVE-2017-1422](https://insights.sbomify.com/CVE-2017-1422/): Missing authorization in MaaS360 DTM (low 3.3) - [CVE-2017-14219](https://insights.sbomify.com/CVE-2017-14219/): Cross-site scripting in intelbras:wrn 240 firmware (medium 6.1) - [CVE-2017-1421](https://insights.sbomify.com/CVE-2017-1421/): Cross-site scripting in iNotes (medium 6.1) - [CVE-2017-14202](https://insights.sbomify.com/CVE-2017-14202/): The shell implementation does not protect against buffer overruns resulting in unpredictable behavior. (high 7.8) - [CVE-2017-14201](https://insights.sbomify.com/CVE-2017-14201/): The shell DNS command can cause unpredictable results due to misuse of stack variables. (high 7.8) - [CVE-2017-14199](https://insights.sbomify.com/CVE-2017-14199/): Memory corruption in getaddrinfo (critical 9.8) - [CVE-2017-14198](https://insights.sbomify.com/CVE-2017-14198/): Code injection in squiz:matrix (high 8.8) - [CVE-2017-14197](https://insights.sbomify.com/CVE-2017-14197/): Cross-site scripting in squiz:matrix (medium 6.1) - [CVE-2017-14196](https://insights.sbomify.com/CVE-2017-14196/): Path traversal in squiz:matrix (high 7.5) - [CVE-2017-14195](https://insights.sbomify.com/CVE-2017-14195/): Cross-site scripting in finecms project:finecms (medium 6.1) - [CVE-2017-14194](https://insights.sbomify.com/CVE-2017-14194/): Cross-site scripting in finecms project:finecms (medium 6.1) - [CVE-2017-14193](https://insights.sbomify.com/CVE-2017-14193/): Cross-site scripting in finecms project:finecms (medium 6.1) - [CVE-2017-14192](https://insights.sbomify.com/CVE-2017-14192/): Cross-site scripting in finecms project:finecms (medium 6.1) - [CVE-2017-14191](https://insights.sbomify.com/CVE-2017-14191/): Security feature bypass in FortiWeb (medium 5.9) - [CVE-2017-14190](https://insights.sbomify.com/CVE-2017-14190/): Cross-site scripting in FortiOS (medium 6.1) - [CVE-2017-14189](https://insights.sbomify.com/CVE-2017-14189/): Auth bypass in FortiWebManager (critical 9.8) - [CVE-2017-14187](https://insights.sbomify.com/CVE-2017-14187/): Privilege escalation in FortiOS (medium 6.2) - [CVE-2017-14186](https://insights.sbomify.com/CVE-2017-14186/): Cross-site scripting in FortiOS (medium 5.4) - [CVE-2017-14185](https://insights.sbomify.com/CVE-2017-14185/): Information disclosure in FortiOS (medium 5.3) - [CVE-2017-14184](https://insights.sbomify.com/CVE-2017-14184/): Information disclosure in FortiClient SSLVPN Client for Linux (high 8.8) - [CVE-2017-14182](https://insights.sbomify.com/CVE-2017-14182/): Denial of service in Fortinet FortiOS (medium 6.5) - [CVE-2017-14181](https://insights.sbomify.com/CVE-2017-14181/): Null dereference in aacplusenc project:aacplusenc (high 7.8) - [CVE-2017-14180](https://insights.sbomify.com/CVE-2017-14180/): Privilege escalation in Apport (high 7.8) - [CVE-2017-1418](https://insights.sbomify.com/CVE-2017-1418/): Misconfiguration in Integration Bus (medium 4.0) - [CVE-2017-14179](https://insights.sbomify.com/CVE-2017-14179/): Privilege escalation in Apport (high 7.8) - [CVE-2017-14178](https://insights.sbomify.com/CVE-2017-14178/): Security feature bypass in snapd (high 7.5) - [CVE-2017-14177](https://insights.sbomify.com/CVE-2017-14177/): Privilege escalation in Apport (high 7.8) - [CVE-2017-14176](https://insights.sbomify.com/CVE-2017-14176/): Bazaar allows remote attackers to execute arbitrary commands via a bzr+ssh URL with initial dash character in hostname (high 8.8) - [CVE-2017-14175](https://insights.sbomify.com/CVE-2017-14175/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2017-14174](https://insights.sbomify.com/CVE-2017-14174/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2017-14173](https://insights.sbomify.com/CVE-2017-14173/): Integer overflow in canonical:ubuntu linux (medium 6.5) - [CVE-2017-14172](https://insights.sbomify.com/CVE-2017-14172/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2017-14171](https://insights.sbomify.com/CVE-2017-14171/): Denial of service in ffmpeg:ffmpeg (medium 6.5) - [CVE-2017-14170](https://insights.sbomify.com/CVE-2017-14170/): Denial of service in ffmpeg:ffmpeg (medium 6.5) - [CVE-2017-14169](https://insights.sbomify.com/CVE-2017-14169/): Integer overflow in debian:debian linux (high 8.8) - [CVE-2017-14167](https://insights.sbomify.com/CVE-2017-14167/): Integer overflow in debian:debian linux (high 8.8) - [CVE-2017-14166](https://insights.sbomify.com/CVE-2017-14166/): Memory corruption in canonical:ubuntu linux (medium 6.5) - [CVE-2017-14165](https://insights.sbomify.com/CVE-2017-14165/): Denial of service in graphicsmagick:graphicsmagick (medium 6.5) - [CVE-2017-14164](https://insights.sbomify.com/CVE-2017-14164/): Memory corruption in uclouvain:openjpeg (high 8.8) - [CVE-2017-14163](https://insights.sbomify.com/CVE-2017-14163/): Auth bypass in mahara:mahara (high 8.8) - [CVE-2017-14160](https://insights.sbomify.com/CVE-2017-14160/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2017-14159](https://insights.sbomify.com/CVE-2017-14159/): Privilege escalation in openldap:openldap (medium 4.7) - [CVE-2017-14158](https://insights.sbomify.com/CVE-2017-14158/): Scrapy denial of service vulnerability (high 7.5) - [CVE-2017-14156](https://insights.sbomify.com/CVE-2017-14156/): Information disclosure in linux:linux kernel (medium 5.5) - [CVE-2017-14153](https://insights.sbomify.com/CVE-2017-14153/): Memory corruption in jungo:windriver (high 7.8) - [CVE-2017-14152](https://insights.sbomify.com/CVE-2017-14152/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2017-14151](https://insights.sbomify.com/CVE-2017-14151/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2017-14149](https://insights.sbomify.com/CVE-2017-14149/): Null dereference in embedthis:goahead (high 7.5) - [CVE-2017-14147](https://insights.sbomify.com/CVE-2017-14147/): Auth bypass in fiberhome:adsl an1020-25 firmware (critical 9.8) - [CVE-2017-14146](https://insights.sbomify.com/CVE-2017-14146/): File upload in helpdezk:helpdezk (high 8.8) - [CVE-2017-14145](https://insights.sbomify.com/CVE-2017-14145/): SQL injection in helpdezk:helpdezk (critical 9.8) - [CVE-2017-14143](https://insights.sbomify.com/CVE-2017-14143/): Hardcoded credentials in kaltura:kaltura server (critical 9.8) - [CVE-2017-14142](https://insights.sbomify.com/CVE-2017-14142/): Cross-site scripting in kaltura:kaltura server (medium 6.1) - [CVE-2017-14141](https://insights.sbomify.com/CVE-2017-14141/): Deserialization in kaltura:kaltura server (high 7.2) - [CVE-2017-14140](https://insights.sbomify.com/CVE-2017-14140/): Information disclosure in linux:linux kernel (medium 5.5) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/103/